140 matches found
CVE-2007-1017
PHP remote file inclusion vulnerability in shownewsinc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the detai...
CVE-2007-1017
PHP remote file inclusion vulnerability in shownewsinc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter...
CVE-2007-1017
The CVE-2007-1017 issue affects VirtualSystem VS-News-System (version 1.2.1 and earlier) where show_news_inc.php accepts the newsordner URL parameter, enabling a PHP remote file inclusion and arbitrary code execution. The root cause is a vulnerable inclusion path that allows remote attackers to D...
CVE-2007-1018
CVE-2007-1018 affects VirtualSystem VS-News-System 1.2.1 and earlier. The issue is a PHP remote file inclusion via the newsordner parameter when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code. This VULNERABILITY is documented in multiple sources (NVD entry; i...
CVE-2007-1018
PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the detai...
CVE-2007-1018: Undefined Security Weakness
PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the detai...
CVE-2007-1017: Undefined Security Weakness
PHP remote file inclusion vulnerability in shownewsinc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter...
VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ VS-News-System VS-News-System //'=============================================================================================== //'Script Name: VS-News-System //'.... //'...
VS-News-System <= 1.2.1 (newsordner) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleVS-News-System = V1.2.1 newsordner Remote File Include Exploit/title script language="JavaScript"...
VS-News-System 1.2.1 - newsordner Remote File Inclusion
VS-News-System 1.2.1 - newsordner Remote File Inclusion VS-News-System //'=============================================================================================== //'Script Name: VS-News-System //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey ...
VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion
VS-News-System //'=============================================================================================== //'Script Name: VS-News-System //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/" var...
CVE-2006-5908: Undefined Security Weakness
Multiple SQL injection vulnerabilities in the loginuser function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System YANS 0.2b allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...
CVE-2005-4000
Cross-site scripting XSS vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter...
CVE-2005-4000
CVE-2005-4000 describes a Cross-site scripting (XSS) vulnerability in the SiteBeater News System (archive.asp) ≤ 4.00, exploitable remotely via the sKeywords parameter. The provided sources state that an attacker can inject arbitrary web script or HTML, leading to potential user session or page c...
CVE-2005-4000: Undefined Security Weakness
Cross-site scripting XSS vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter...
Sitebeater News System XSS vuln.
Sitebeater News System XSS vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html affected version: 4.00 and prior Product Description: News Features: mailing lists, polls, themes, attachments, search, categories,...
Avenger's News System Command Execution
A security vulnerability in Avenger SPDX-FileCopyrightText: 2002 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10875";...
Possible Bug in PHP-Fusion 6.0.204
There is a Bug in The News-System: Post something like: memetata http-equiv = "refresh" content = "1; URL = http://www.google.com" and you'll be redirected to google. Possible Solution: use a recursive function to filter metatags...
PhpMyFAQ 1.5.1 multiple vulnerabilities
2.31 23/09/2005 PhpMyFaq 1.5.1 SQL injection / board takeover / user info disclosure / path disclosure remote code / commands execution software: site: http://www.phpmyfaq.de/ description: "phpMyFAQ is a multilingual, completely database-driven FAQ-system. It supports various databases to store a...